Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: Sde86KfVtzL94ZTOpe5PjR1sHaLSDFoKvAMgqmpsKBk=
Subject key identifier: B2:B4:6B:2C:C8:2F:9E:F0:94:03:D2:B6:1E:75:E3:E1:31:C9:3C:FE
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 0196BD494CFA0E8B43DD543A0658C8CC1C01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1533
Signing time: Sun 11 May 2025 03:00:19 +0000
Manifest this update: Sun 11 May 2025 03:00:19 +0000
Manifest next update: Mon 12 May 2025 03:00:19 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: ypJ6BHYXbygyZgtFmtEustdq4Dmi8Q6xP0gKi7TTWOA=)
2: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (hash: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=)
3: uVBTeEzfoyB7JY96y5uQlYBoA00.roa (hash: 1QuqtDmpz5L96A5DhcdUsvLbu6XhjJTyVS+t4jv+5BI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:49:4c:fa:0e:8b:43:dd:54:3a:06:58:c8:cc:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: May 11 03:00:19 2025 GMT
Not After : May 12 03:00:19 2025 GMT
Subject: CN=b2b46b2cc82f9ef09403d2b61e75e3e131c93cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:45:12:86:bd:83:0f:89:11:be:8b:52:5d:
7b:5f:60:62:d0:0b:ac:76:53:3e:0d:6e:00:0f:f4:
4a:dc:9a:17:45:66:92:3b:50:43:f3:c1:42:58:65:
6e:c0:47:03:ab:31:3f:56:f1:ee:67:42:02:3f:18:
10:3d:bb:93:90:42:d1:6f:b7:bf:42:20:02:96:fe:
69:f9:de:c0:d1:42:87:c1:08:f9:db:8c:2d:4b:ad:
f3:d7:bc:b8:d7:58:c2:0f:c4:44:e7:aa:75:04:cb:
5c:50:92:7a:3d:6e:ed:f7:d2:cc:8c:8d:95:73:6a:
d4:4f:71:63:c0:dd:a2:3f:ca:58:57:d7:81:50:9d:
d1:43:13:51:e7:3b:bc:34:91:c1:4a:7a:ff:cc:35:
42:63:60:40:6b:d4:a1:67:04:82:32:95:b9:be:54:
ec:23:9f:b2:59:30:cd:2e:b5:48:d2:cb:37:8c:9d:
46:41:94:63:4e:08:fa:44:ce:15:9a:42:68:0b:88:
de:75:7c:86:20:03:6c:f9:b8:5f:54:fa:8b:05:8a:
cc:ee:1f:ef:a1:f3:0d:85:d4:fe:b1:4a:ae:f5:50:
0c:87:63:c4:9d:59:72:48:f5:f5:fc:aa:3d:e1:a7:
d4:12:71:bb:f9:5c:8c:94:66:ed:9e:11:1b:d1:8e:
e3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B4:6B:2C:C8:2F:9E:F0:94:03:D2:B6:1E:75:E3:E1:31:C9:3C:FE
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:dd:d1:52:05:ee:ee:61:d4:5c:41:83:04:40:de:e4:99:
23:63:34:bc:2c:e6:19:f6:f1:e7:18:21:2b:e5:e3:e4:26:a4:
e9:f5:e5:99:08:bb:75:04:da:af:50:e9:6f:cf:2b:32:09:09:
17:a8:95:b5:6f:02:8d:4b:08:9e:79:39:ca:f8:79:80:25:8a:
09:73:af:64:08:06:eb:8a:d0:c4:85:79:bc:c6:35:dd:be:74:
5f:3d:e2:21:3d:89:b6:38:aa:94:6e:54:db:54:5d:51:51:93:
ad:f0:75:f3:a4:ed:dc:bd:4c:b8:64:29:3a:72:7c:dc:3d:65:
d1:e4:85:e4:12:42:c1:40:c6:2d:72:24:c8:a7:a1:db:8a:42:
4e:e2:c4:9a:92:ed:e8:a6:ee:cb:bd:9c:c4:9e:2c:b7:e7:27:
a5:db:60:b1:93:eb:5d:86:ea:19:9e:41:01:e0:9a:27:2e:92:
c5:22:95:38:7d:d0:05:45:ba:59:e5:fa:9b:c1:f8:17:86:09:
8c:03:61:13:fa:cc:36:24:df:a3:4b:44:70:43:48:a8:6f:d2:
88:c0:fb:c3:d8:f3:24:18:2f:4f:06:a9:29:90:02:ed:81:30:
13:c2:02:50:e9:31:94:c6:1f:0d:1f:dc:8e:35:0c:24:f8:8b:
2c:fc:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:25:47 2025 by rpki-client